Re: fuzzy subnet aggregation

2019-10-28 Thread Joe Maimon
Good news, bad news. With an inefficient bash script on an inefficient platform, 120k processes in less than 15minutes. Thus far, the best I have is less than 10% reduction with barely acceptable aggressiveness. The distribution is too varied or the level of aggressiveness has to be beyond

Re: SP 800-189 (Draft), Resilient Interdomain Traffic Exchange

2019-10-28 Thread Montgomery, Douglas C. (Fed) via NANOG
Sorry, finger faulted and hit send by accident. In response to Ruediger’s comment about guidance to USG agencies / networks on the issues of BGP, there is NIST guidance under development that addresses this. NIST SP.800-189 - Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigat

RE: fuzzy subnet aggregation

2019-10-28 Thread Michel Py
> Mark Leonard wrote : > Your processing time for 5k IPs should be measured in seconds (ie: less than > one) rather than minutes on any modern core. I agree. I am surprised by the minutes thing as well. > Based on your pseudocode (sort -n | uniq) I get the impression that you're > using BASH w

Re: SP 800-189 (Draft), Resilient Interdomain Traffic Exchange

2019-10-28 Thread Job Snijders
Dear Douglas, Thanks for sharing the link. This is an impressive effort! Can you share with the group what the best way is to share feedback to effect changes in the document? Is there a difference between just emailing you or are there official channels to be considered? Kind regards, Job On

SP 800-189 (Draft), Resilient Interdomain Traffic Exchange

2019-10-28 Thread Montgomery, Douglas C. (Fed) via NANOG
https://csrc.nist.gov/publications/detail/sp/800-189/draft / This document provides technical guidance and recommendations for technologies that improve the security and robustness of interdomain traffic exchange. Technologies recommended in this document for securing the interdomain routing

Re: Unable to email anyone from my primary domain name; thanks Google Mail and G Suite.

2019-10-28 Thread John Peach
On 10/28/19 1:43 PM, Alain Hebert wrote:     Hi,     This is not an assumption, it is my experience. Mine as well. My mail server's PTR records are identical for IPv4 and IPv6. IPv6 fails and IPv4 is fine. I disabled IPv6 for gmail.com.     Sorry it didn't fit your case. - Alain

Re: Unable to email anyone from my primary domain name; thanks Google Mail and G Suite.

2019-10-28 Thread Alain Hebert
    Hi,     This is not an assumption, it is my experience.     Sorry it didn't fit your case. - Alain Hebertaheb...@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.netFax

Re: fuzzy subnet aggregation

2019-10-28 Thread Joe Maimon
At this time I am just trying to get an idea if the whole exercise is worth it. Whether the processing time is feasible for 5k, 50k, 100k, 200k. Whether the results reduce the count measurably at acceptable collateral levels. Because rtbh scaling to 100k is one thing. And from there it could g

Re: IPv4 and Auctions

2019-10-28 Thread Lee Howard
On 10/27/19 12:47 PM, Michel Py wrote: Michel Py wrote : What I like with Hilco is that it brings transparency to the market. I think that each transfer should list the amount of the transaction between parties. For example, I would like to know for how much 44.192/10 went. The parties to

Re: fuzzy subnet aggregation

2019-10-28 Thread Mark Leonard
You could modify a radix tree to include a consolidation function and resulting confidence. Then walk the nodes of the tree, check to see if the subtree meets the requirements for consolidation, if so, prune and record the confidence. You would need to re-run the consolidation from the original d